Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature/Identity] Identity Module and tokens for internal authentication #5471

Closed
Closed
Changes from 1 commit
Commits
Show all changes
93 commits
Select commit Hold shift + click to select a range
a01cb3e
Create auth token after successful authc + authz for internal transpo…
cwperks Nov 21, 2022
9b176f3
WIP adding internalClusterTest
cwperks Nov 21, 2022
ba989cc
WIP on internal tokens
cwperks Nov 23, 2022
7fca5b5
WIP on internal tokens distributed through the cluster
cwperks Nov 25, 2022
d7324d0
WIP on internal tokens
cwperks Dec 5, 2022
1cf3bb2
Merge branch 'feature/identity' into internal-tokens
cwperks Dec 5, 2022
0bd3141
Fix flaky ShardIndexingPressureConcurrentExecutionTests (#5439)
Rishikesh1159 Dec 5, 2022
4662fb9
Add missing import
cwperks Dec 5, 2022
8277f5a
Create identity module
cwperks Dec 5, 2022
0c62564
Test rest wrapper with gradlew run
cwperks Dec 6, 2022
913cb3a
Fix bwc for cluster manager throttling settings (#5305)
dhwanilpatel Dec 6, 2022
750134e
Add HttpSmokeTestCaseWithIdentity
cwperks Dec 6, 2022
5500114
Update ingest-attachment plugin dependencies: Apache Tika 3.6.0, Apac…
reta Dec 6, 2022
e136240
WIP on verifying tokens passed through the cluster test
cwperks Dec 6, 2022
c3e3712
Remove sysout in RestClient
cwperks Dec 6, 2022
ca619bb
Create and use TokenInterceptorPlugin for IT
cwperks Dec 7, 2022
c7f0844
Add to CHANGELOG
cwperks Dec 7, 2022
8d321cd
Add package-info and disable missingJavadoc for identity module
cwperks Dec 7, 2022
1069660
Enhance CheckpointState to support no-op replication (#5282)
ashking94 Dec 7, 2022
ce1ee4b
Remove sysouts in ActionModule
cwperks Dec 7, 2022
40bc815
Run spotlessApply
cwperks Dec 7, 2022
a47fc78
Run spotlessApply on identity module
cwperks Dec 7, 2022
de33925
Fix :sandbox:modules:identity:loggerUsageCheck
cwperks Dec 7, 2022
88da9a5
Re-run ./gradlew :sandbox:modules:identity:spotlessApply
cwperks Dec 7, 2022
22ee0cc
Add Identity module tests
cwperks Dec 7, 2022
2416d37
[BUG] org.opensearch.repositories.s3.RepositoryS3ClientYamlTestSuiteI…
reta Dec 7, 2022
29d561f
Move basic auth tests to identity
cwperks Dec 7, 2022
42125b8
Add abstract
cwperks Dec 7, 2022
bc1874c
Modify ReindexFromRemoteWithAuthTests
cwperks Dec 8, 2022
ce17ea1
Bypass session error by ensuring user is logged out before login is c…
cwperks Dec 8, 2022
ce25dec
[Bug] fix case sensitivity for wildcard queries (#5462)
nknize Dec 8, 2022
52590e1
Create rest client against data nodes to ensure tranport requests are…
cwperks Dec 8, 2022
5fcc29d
Remove SecurityInterceptor
cwperks Dec 8, 2022
f7fcf57
Fix failing test ReindexIT.testDeleteByQueryTask
cwperks Dec 8, 2022
6822325
Switch to TEST scope
cwperks Dec 8, 2022
bea27b8
Support OpenSSL Provider with default Netty allocator (#5460)
reta Dec 9, 2022
a060c0a
Revert "build no-jdk distributions as part of release build (#4902)" …
rursprung Dec 9, 2022
6b9d75b
Move AuthenticationManager setup to IdentityPlugin createComponents
cwperks Dec 9, 2022
000fa6a
Remove sysout in SecurityRestFilter
cwperks Dec 9, 2022
8617dbe
Add max_shard_size parameter for Shrink API (fix supported version af…
reta Dec 9, 2022
0a50311
Run :server:spotlessApply
cwperks Dec 9, 2022
0f651b8
Sync CODEOWNERS with MAINTAINERS. (#5501)
dblock Dec 9, 2022
c6663fd
Added jackson dependency to server (#5366)
ryanbogan Dec 9, 2022
7108ee5
Fix flaky test BulkIntegrationIT.testDeleteIndexWhileIndexing (#5491)
Poojita-Raj Dec 9, 2022
67977a2
Add release notes for 2.4.1 (#5488)
xuezhou25 Dec 9, 2022
d4e5a28
Properly skip OnDemandBlockSnapshotIndexInputTests.testVariousBlockSi…
mch2 Dec 9, 2022
e41cbe5
Merge first batch of feature/extensions into main (#5347)
ryanbogan Dec 10, 2022
bceb40c
Bump commons-compress from 1.21 to 1.22 (#5520)
dependabot[bot] Dec 12, 2022
d38ebd9
Move Identity and IdentityTests to identity module
cwperks Dec 12, 2022
0cf6797
[Segment Replication] Trigger a round of replication for replica shar…
Rishikesh1159 Dec 12, 2022
b9e6ff0
Merge branch 'main' into internal-tokens
cwperks Dec 12, 2022
d3da9cf
Add missing sha files
cwperks Dec 12, 2022
2098d00
Remove opensearch-authn dependency on server and fix dependencyLicenses
cwperks Dec 12, 2022
54d1b48
Move noop tests to opensearch-authn
cwperks Dec 12, 2022
b8377c2
Fix precommit
cwperks Dec 12, 2022
2a98d8d
Add getClassLoader permission
cwperks Dec 12, 2022
c9234ca
Ignore flaky test and leave TODO statement
cwperks Dec 12, 2022
e22dc9d
Use AwaitsFix instead of Ignore
cwperks Dec 12, 2022
6f72712
Remove unused import
cwperks Dec 12, 2022
5cdf41d
Add accessUserInformation permission
cwperks Dec 13, 2022
08cd06f
Adding support to register settings dynamically (#5495)
ryanbogan Dec 13, 2022
ceca161
Updated 1.3.7 release notes date (#5536)
owaiskazi19 Dec 13, 2022
aecd1ea
Pre conditions check before updating weighted routing metadata (#4955)
imRishN Dec 13, 2022
ff16ebd
Atomically update cluster state with decommission status and correspo…
imRishN Dec 13, 2022
a15147c
Use shiro.ini for initialization
cwperks Dec 13, 2022
29b799d
Add commons-logging
cwperks Dec 13, 2022
a0e0a3f
fix thirdPartyAudit
cwperks Dec 13, 2022
f8fa37c
Add securityManager.subjectDAO.sessionStorageEvaluator.sessionStorage…
cwperks Dec 13, 2022
ea73119
Update Netty to 4.1.86.Final (#5529)
reta Dec 13, 2022
ec5144b
Update release date in 2.4.1 release notes (#5549)
dreamer-89 Dec 13, 2022
1710786
Update 2.4.1 release notes (#5552)
reta Dec 13, 2022
d549367
Ignore RestClientSingleHostIntegTests.testManyAsyncRequests
cwperks Dec 13, 2022
16236c0
Disable tests running many async requests
cwperks Dec 13, 2022
e9cbeb7
Use authenticate instead of login
cwperks Dec 13, 2022
507d0ea
Remove apply plugin: 'opensearch.testclusters'
cwperks Dec 14, 2022
54145d9
Add ability to disable identity via settings
cwperks Dec 14, 2022
6e8d469
Run spotlessApply
cwperks Dec 14, 2022
c61e08d
Re-run ci
cwperks Dec 14, 2022
e6fd640
Disable identity for qa full-cluster-restart
cwperks Dec 14, 2022
6992fa9
Add V_2_4_2 in Version
cwperks Dec 14, 2022
d3f6dfa
Refactor fuzziness interface on query builders (#5433)
noCharger Dec 14, 2022
22695a6
Remove identity.disabled in full-cluster-restart/build.gradle
cwperks Dec 14, 2022
a3b6216
Disable identity module by default and add setting to enable
cwperks Dec 14, 2022
88232b7
Set default to false
cwperks Dec 14, 2022
27db2a1
Test identity module with identity enabled
cwperks Dec 14, 2022
0475d1c
Upgrade lucene version (#5570)
dreamer-89 Dec 14, 2022
459c18e
Set identity enabled in HttpSmokeTestCaseWithIdentity
cwperks Dec 14, 2022
fe8fd67
Add CI bundle pattern to distribution download (#5348)
zelinh Dec 14, 2022
cb26035
Bump protobuf-java from 3.21.9 to 3.21.11 in /plugins/repository-hdfs…
dependabot[bot] Dec 14, 2022
68efc49
Remove added Version
cwperks Dec 15, 2022
d53c4b8
Merge branch 'main' into internal-tokens
cwperks Dec 15, 2022
1d56fa3
Re-enable tests with many async requests
cwperks Dec 15, 2022
4ddbd03
Remove changes in OpenSearchRestTestCase
cwperks Dec 15, 2022
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Modify ReindexFromRemoteWithAuthTests
Signed-off-by: Craig Perkins <[email protected]>
cwperks committed Dec 8, 2022
commit bc1874c4a4b49301c49ec5945916f3a8ca2d2bdb
Original file line number Diff line number Diff line change
@@ -167,8 +167,6 @@ public void testReindexWithBadAuthentication() throws Exception {
.destination("dest")
.setRemoteInfo(newRemoteInfo("junk", "auth", emptyMap()));
OpenSearchStatusException e = expectThrows(OpenSearchStatusException.class, () -> request.get());
assertThat(e.getMessage(), containsString("\"error\":\"junk does not exist in internal realm.\"")); // Due to native auth
// implementation
}

/**